Lucene search
+L

1378 matches found

Tenable Nessus
Tenable Nessus
added 2023/02/02 12:00 a.m.21 views

Webmin < 1.910 Remote Command Execution

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.910. It is, therefore, affected by a Remote Command Execution Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...

7.8CVSS7.5AI score0.23689EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
added 2023/02/02 12:00 a.m.17 views

Webmin < 1.997 Remote Code Execution

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.997. It is, therefore, affected by a Remote Code Execution Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...

9.8CVSS7.8AI score0.96049EPSS
SaveExploits8References3
Tenable Nessus
Tenable Nessus
added 2023/02/02 12:00 a.m.76 views

Webmin < 1.930 Remote Command Execution

According to its self-reported version, the Webmin install hosted on the remote host is 1.890 to 1.920. It is, therefore, affected by a remote command execution vulnerability. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported...

10CVSS7.2AI score0.99766EPSS
SaveExploits40References5
Tenable Nessus
Tenable Nessus
added 2023/02/02 12:00 a.m.16 views

Webmin < 1.950 Multiple Vulnerabilities

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.950. It is, therefore, affected by multiple vulnerabilities. - An Improper Data Validation Vulnerability affecting the Command Shell Endpoint. - A Cross-Site Scripting affecting the save function of...

6.1CVSS6.8AI score0.80215EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2023/02/02 12:00 a.m.20 views

Webmin < 1.920 Remote Command Execution

According to its self-reported version, the Webmin install hosted on the remote host is prior to 1.920. It is, therefore, affected by a Remote Command Execution Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No...

7.8CVSS7.5AI score0.23689EPSS
SaveExploits4References3
OpenVAS
OpenVAS
added 2022/11/10 12:00 a.m.24 views

Webmin < 2.003 XSS Vulnerability

Webmin is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:webmin:webmin";...

6.1CVSS5.8AI score0.00618EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2022/11/08 3:22 p.m.204 views

Exploit for Improper Access Control in Webmin

WebminRCE-exploit CVE-2022-0824, CVE-2022-0829 - File Manger p...

9CVSS7.3AI score0.96977EPSS
SaveExploits14
NVD
NVD
added 2022/11/02 8:15 p.m.28 views

CVE-2022-3844

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...

6.1CVSS0.00618EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2022/11/02 8:15 p.m.5 views

CVE-2022-3844

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...

6.1CVSS3.9AI score0.00618EPSS
SaveExploits0References5
Prion
Prion
added 2022/11/02 8:15 p.m.23 views

Cross site scripting

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...

5.8CVSS6.1AI score0.00618EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2022/11/02 12:00 a.m.32 views

CVE-2022-3844 Webmin index.cgi cross site scripting

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...

4CVSS6.2AI score0.00618EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/11/02 12:00 a.m.10 views

Webmin 跨站脚本漏洞

Webmin is a set of Web-based system administration tools for Unix-like operating systems from the Webmin community. Webmin suffers from a cross-site scripting vulnerability that originates in an unknown function of xterm/index.cgi that could lead to cross-site scripting issues...

6.1CVSS4.8AI score0.00618EPSS
SaveExploits0References6
Packet Storm
Packet Storm
added 2022/11/02 12:00 a.m.480 views

Webmin 1.984 File Manager Remote Code Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Webmin File Manager RCE', 'Description' = %q In Webmin version 1.984, any authenticated low privilege user without access rights to the File...

9CVSS8.6AI score0.96977EPSS
SaveExploits13
zdt
zdt
added 2022/11/02 12:00 a.m.635 views

Webmin 1.984 File Manager Remote Code Execution Exploit

In Webmin version 1.984, any authenticated low privilege user without access rights to the File Manager module could interact with file manager functionalities such as downloading files from remote URLs and changing file permissions. It is possible to achieve remote code execution via a crafted...

8.8CVSS8.7AI score0.96977EPSS
SaveExploits13
CVE
CVE
added 2022/11/02 12:00 a.m.87 views

CVE-2022-3844

CVE-2022-3844 affects Webmin 2.001, reporting a cross-site scripting (XSS) vulnerability in an unknown function of xterm/index.cgi. The advisory states the issue can be triggered remotely and that upgrading to Webmin 2.003 mitigates it, with patch reference d3d33af3c0c3fd3a889c84e287a038b7a457d81...

6.1CVSS4.8AI score0.00618EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/11/02 12:00 a.m.30 views

CVE-2022-3844 Webmin index.cgi cross site scripting

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...

3.5CVSS4.2AI score
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2022/11/02 12:00 a.m.16 views

PT-2022-24410 · Webmin · Webmin

Name of the Vulnerable Software and Affected Versions: Webmin versions prior to 2.003 Description: A problematic issue was found in Webmin, affecting an unknown function of the file xterm/index.cgi, leading to basic cross site scripting. The manipulation can be launched remotely. Recommendations:...

6.1CVSS4.2AI score0.00618EPSS
SaveExploits1References9
Vulnrichment
Vulnrichment
added 2022/11/02 12:00 a.m.15 views

CVE-2022-3844 Webmin index.cgi cross site scripting

A vulnerability, which was classified as problematic, was found in Webmin 2.001. Affected is an unknown function of the file xterm/index.cgi. The manipulation leads to basic cross site scripting. It is possible to launch the attack remotely. Upgrading to version 2.003 is able to address this issu...

4CVSS6.2AI score0.00618EPSS
SaveExploits0References4
CNNVD
CNNVD
added 2022/10/25 12:00 a.m.7 views

Usermin 操作系统命令注入漏洞

Webmin Usermin is a web-based interface from Webmin Inc. It is used for webmail, password change, mail filters, fetchmail, and more. A security vulnerability exists in Usermin version 1.850 and earlier versions. An attacker can exploit this vulnerability to perform OS command injection attacks...

8.8CVSS8AI score0.02852EPSS
SaveExploits1References4
GithubExploit
GithubExploit
added 2022/10/17 11:47 a.m.176 views

Exploit for Improper Access Control in Webmin

golang-webmin-CVE-2022-0824-revshell RCE in Webmin target ur...

9CVSS6.7AI score0.96977EPSS
SaveExploits14
Rows per page
Query Builder